Bug 24335

Summary:	pagure new security issue CVE-2019-7628
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Neal Gompa <ngompa13>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	pagure-5.2-4.mga7.src.rpm	CVE:
Status comment:	Fixed upstream in 5.3

Description David Walser 2019-02-10 19:00:02 CET

A security issue in Pagure has been announced on February 8:
https://www.openwall.com/lists/oss-security/2019/02/08/1

Comment 1 David Walser 2019-03-12 15:20:15 CET

Fedora has issued an advisory for this on February 24:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/S2EOZZCWSNGXKL7CP3HFPWHO4B2KLZDT/

Fixed in Cauldron in pagure-5.3-1.mga7 by Neal two weeks ago.

Resolution: (none) => FIXED
Status comment: (none) => Fixed upstream in 5.3
Status: NEW => RESOLVED